Privacy Policy for travelcation.uk

At travelcation.uk, accessible from www.travelcation.uk, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that are collected and recorded by travelcation.uk and how we use it.

If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us.

This Privacy Policy applies only to our online activities and is valid for visitors to our website with regards to the information that they shared and/or collect in travelcation.uk. This policy does not apply to any information collected offline or via channels other than this website.

Purposes of Processing

When EEA Individuals make a booking, purchase services, or inquire (including conducting searches) through the Website (including desktop and mobile web versions) or contact centres, Travelcation will process EEA Individuals’ personal data for the following purposes:

Provide the travel services and products that you have requested (e.g., flight booking, hotel stays, provision of ancillary products and services), including generating your PNR and transfer of such PNR and other personal data to other travel suppliers or service providers as needed for travel arrangements or payment processing/refunding;

Fraud detection and prevention;

Respond to customer inquiries and provide support (e.g. interfacing with contact centres for issue resolution or recommendations based on search history and previous bookings, outbound ‘flight failure’ team calls if there is a booking or purchase checkout issue, submission and resolution of Customer Support Requests via the Customer Support link); and

Email direct marketing when you become a Travelcation customer or enter into negotiations for a sale (e.g., actively express an interest in our products and services by significantly completing the booking/checkout path or requesting a quote).

Legal Basis of Processing

Travelcation processes EEA Individuals’ personal data

in the case of providing travel services or fraud detection and prevention, as necessary for the performance of a contract to which such EEA resident is a party or in order to take steps at the request of such EEA resident before entering into a contract, and

in the case of responding to customer inquiries/providing support or direct marketing to Travelcation customers (or those who have entered into negotiations for a sale), Travelcation’s legitimate interest in providing such services which, after careful assessment, Travelcation has determined are not overridden by the interests and fundamental rights and freedoms of EEA Individuals since such EEA Individuals expect customer support for their travel plans and are likely interested in other products and services from Travelcation, respectively. EEA Individuals can opt out of email direct marketing at any time by clicking ‘Unsubscribe’.

PNR Data

A Passenger Name Record (PNR) is the record of your itinerary that is generated after booking through a website or contact centre; it is the primary information submitted by you in order to enjoy our core services. This information is provided by you during the check-out process and passed on to the relevant supplier, such as an airline or hotel, in order to enable your reservation. This information includes, as relevant, name, telephone number, email address, mobile number, date of birth, gender, age, payment details, co-traveller details, passport details, accommodation and special meal requests flight or other service details, and/or TSA Known Traveller Number.

Consequences of Not Providing Necessary Information

As stated above, Travelcation relies on the “necessary for the performance of a contract” legal basis for the provision of travel services and products that you have purchased. All fields during the booking process are considered mandatory and failure to provide such information will result in not being able to make such booking. Further, to the extent such information is inaccurate, please correct it immediately (including by contacting Travelcation customer support) in order to ensure that the validity of your booking or other purchase is not affected.

Automated Decision-making

Travelcation has implemented measures to detect and prevent financial fraud that, for a very small subset of transactions, involve automated decision-making that may result in the rejection of a booking made by such EEA individuals.

There are thousands of transactions on Travelcation websites each day. Approximately 6% of these transactions are put in a queue (based on rules established by Travelcation) for further analysis by an application licensed to Travelcation and hosted on a PCI-compliant server operated by a thirdparty vendor. The application “scores” each transaction for risk using a set of rules created by Travelcation

Approximately 1% of these transactions are auto-cancelled when multiple rules for declining are triggered. The other transactions (approximately 5%) are investigated by our fraud team before being declined or accepted. For example, they may contact the bank, cardholder, etc. and conduct follow-up.

For the 1% of transactions described above, Travelcation allows affected EEA Individuals to request human intervention by Travelcation and provide their point of view by reaching out to support@travelcation.uk

Consent

By using our website, you hereby consent to our Privacy Policy and agree to its terms.

Information we collect

The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.

If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

When you register for an Account, we may ask for your contact information, including items such as name, company name, address, email address, and telephone number.

How we use your information

We use the information we collect in various ways, including:

• Provide, operate, and maintain our website
• Improve, personalize, and expand our website
• Understand and analyse how you use our website
• Develop new products, services, features, and functionality
• Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes
• Send you emails
• Find and prevent fraud

Log Files

travelcation.uk follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and are a part of hosting services' analytics. The information collected by log files includes internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any personally identifiable information. The purpose of the information is for analysing trends, administering the site, tracking users' movement on the website, and gathering demographic information.

Advertising Partners Privacy Policies

You may consult this list to find the Privacy Policy for each of the advertising partners of travelcation.uk.

Third-party ad servers or ad networks uses technologies like cookies, JavaScript, or Web Beacons that are used in their respective advertisements and links that appear on travelcation.uk, which are sent directly to users' browser. They automatically receive your IP address when this occurs. These technologies are used to measure the effectiveness of their advertising campaigns and/or to personalize the advertising content that you see on websites that you visit.

Note that travelcation.uk has no access to or control over these cookies that are used by third-party advertisers

Third-Party Privacy Policies

travelcation.UK’s Privacy Policy does not apply to other advertisers or websites. Thus, we are advising you to consult the respective Privacy Policies of these third-party ad servers for more detailed information. It may include their practices and instructions about how to opt for certain options.

You may find a complete list of these Privacy Policies and their links here: Privacy Policy Links.

You can choose to disable cookies through your individual browser options. To know more detailed information about cookie management with specific web browsers, it can be found on the browsers' respective websites. What Are Cookies?

CCPA Privacy Rights (Do Not Sell My Personal Information)

Under the CCPA, among other rights, California consumers have the right to:
Request that a business that collects a consumer's personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.
Request that a business deletes any personal data about the consumer that a business has collected.
Request that a business that sells a consumer's personal data, not sell the consumer's personal data.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

GDPR Data Protection Rights

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

• The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.
• The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
• The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
• The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

Children's Information

Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.

travelcation.uk does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.